Threats Tagged 'cve-2026-47389'
View all threats tagged with 'cve-2026-47389'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-47389'
Click on any threat for detailed analysis and mitigation recommendations
BIT-mastodon-2026-47389: Mastodon: SSRF protection bypass on older Ruby versionsCVE-2026-47389 0 Mastodon versions prior to 4.5.10, 4.4.17, and 4.3.23 using Ruby versions older than 3.4 have a Server-Side Request Forgery (SSRF) protection bypass. The vulnerability arises because PrivateAddressCheck.private_address? incorrectly returns false for IPv4-mapped IPv6 addresses, allowing attackers controlling DNS to redirect HTTP fetches to private IPv4 addresses such as loopback or cloud metadata endpoints. This issue is fixed in Mastodon versions 4.5.10, 4.4.17, and 4.3.23. Join the discussion | GCVE Database | 07/06/2026, 05:55:17 UTC Added: 07/06/2026, 23:04:20 UTC |
Showing 1 to 1 of 1 result